CVE-2017-3130

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets.

Score

CVSS 3.0 7.5 High

Status

Modified - psirt@fortinet.com

Published

2017-08-10

Last modified

2024-10-25

Weaknesses

CWE-200

Affected products

• Fortios (Fortinet)
• Fortinet Fortios (Fortinet Inc.)

References

• http://www.securityfocus.com/bid/100211
• https://fortiguard.com/advisory/FG-IR-17-073